Static task
static1
Behavioral task
behavioral1
Sample
NEAS.bb8aebe2b7c9057483b3657de4d68e40.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.bb8aebe2b7c9057483b3657de4d68e40.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.bb8aebe2b7c9057483b3657de4d68e40.exe
-
Size
14KB
-
MD5
bb8aebe2b7c9057483b3657de4d68e40
-
SHA1
8f14f6c7daf2dd9172188bbc9274a7da62fb16f4
-
SHA256
db5a866aaf22065efde27050bde6d16374aa68d9a9f43394c1dadf00ba4d362f
-
SHA512
b690f1acd5744aa67b8e3c6ac5033c40165d3f215689e96982c6c0bdd7e0eb2cb45c49291a42daf420c589f06d913b1b1cdf92be031d57122752bdda5d6df9ae
-
SSDEEP
384:sqISJd5UIp5PXwHDjWmxvLv4CiURDE045HlJ/OJ/OJ/OJ/OJ/:sWzUIn4HDNxTgCZhAtOOOO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.bb8aebe2b7c9057483b3657de4d68e40.exe
Files
-
NEAS.bb8aebe2b7c9057483b3657de4d68e40.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ